Failover Configuration for Authentication Server

Unavailability of the authentication server could lead to user logon failures. It is important to make sure that the authentication server is always available and reachable from the HyWorks Controller.

To keep the availability of the authentication servers, HyWorks supports the configuration of a secondary authentication server. This can be used to authenticate users when the primary authentication server is unavailable.

Supported Authentication Servers

The secondary authentication server is currently supported for Microsoft Active Directory servers only.

How to configure a secondary Active Directory Server

To configure the secondary authentication server, follow the steps listed below:

1. Log in to the HyWorks Controller Management Console using appropriate Administrator credentials.

2. Navigate to the Settings tab and click on Configure > Authentication tab.

3. Click on the Add button to open the Add Authentication Server configuration settings. Else click on the Edit button if the authentication server of the Active Directory type already exists.

4. In the Add/Edit Authentication Server section:

   1. Provide all configurations as mentioned in the Add Authentication Server. This will act as primary authentication server in HyWorks.

   2. Select the checkbox Add Secondary Authentication Server, which will enable the fields for the secondary authentication server

      1. Provide all appropriate details of standby or secondary active directory server.

5. Click on the Test Connection button.

6. Once a successful connection message appears, click on the Add button.

7. Authentication servers should be added and should be shown in the Authentication section.

Authentication Server Failover Mechanism

The Authentication server's failover mechanism works in the same manner as the Session Provider Failover mechanism, which means:

1. When both servers are up

   The primary authentication server will be used to authenticate users.

2. When secondary is down, and primary is up

   The primary authentication server will be used to authenticate users.

3. When Primary goes down and secondary is up

   The HyWorks Controller will automatically switch to the secondary authentication server and the secondary server will be used to authenticate users.

4. Primary comes up and secondary goes down

   The HyWorks Controller will automatically switch to the primary authentication server and user authentication will be done using the primary authentication server.

5. When both go down and neither of the servers comes up

   The HyWorks Controller will use whichever authentication server comes up first and is reachable to authenticate users.

6. Primary goes down -- Comes up again

   If the primary server goes down, the HyWorks Controller will start using the secondary server and when the primary server comes up again, the Controller will keep the primary in standby mode. This means it will continue to use the secondary server.

   The Administrator will be displayed an option to switch to the primary authentication server by using the Use This button, which will again configure the primary authentication server as active server.

Once this option is selected, authentication will happen using the primary authentication server.